Spring AI's spring-ai-neo4j-store contains a Cypher injection vulnerability in Neo4jVectorFilterExpressionConverter. When a user-controlled string is passed as a filter expression key in Neo4jVectorFilterExpressionConverter of spring-ai-neo4j-store, doKey() embeds the key into a backtick-delimited Cypher property accessor (node.`metadata.`) after stripping only double quotes, without escaping embedded backticks.This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4.
References
| Link | Resource |
|---|---|
| https://spring.io/security/cve-2026-22743 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
16 Apr 2026, 20:23
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Vmware
Vmware spring Ai |
|
| CPE | cpe:2.3:a:vmware:spring_ai:*:*:*:*:*:*:*:* | |
| References | () https://spring.io/security/cve-2026-22743 - Vendor Advisory |
27 Mar 2026, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-89 |
27 Mar 2026, 06:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-03-27 06:16
Updated : 2026-04-16 20:23
NVD link : CVE-2026-22743
Mitre link : CVE-2026-22743
CVE.ORG link : CVE-2026-22743
JSON object : View
Products Affected
vmware
- spring_ai
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')